Skip to content

Bump the go_modules group across 7 directories with 1 update#5

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/go_modules-3a08f67f5b
Closed

Bump the go_modules group across 7 directories with 1 update#5
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/go_modules-3a08f67f5b

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 14, 2025

Bumps the go_modules group with 1 update in the / directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /core/scripts directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /deployment directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /integration-tests directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /integration-tests/load directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /system-tests/lib directory: github.com/cometbft/cometbft.
Bumps the go_modules group with 1 update in the /system-tests/tests directory: github.com/cometbft/cometbft.

Updates github.com/cometbft/cometbft from 0.38.17 to 0.38.19

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.19

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

Full Changelog: cometbft/cometbft@v0.38.18...v0.38.19

v0.38.18

What's Changed

Full Changelog: cometbft/cometbft@v0.38.17...v0.38.18

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.19

October 14, 2025

This release fixes two security issues, including (ASA-2025-003). Users are encouraged to upgrade as soon as possible.

Additionally included is a bug fix to properly prune extended commits (with vote extensions).

BUG-FIXES

  • [consensus] Reject oversized proposals (#5324)
  • [store] Prune extended commits properly (5275)
  • [bits] Validate BitArray mismatched Bits and Elems length (ASA-2025-003)

v0.38.18

July 3, 2025

Adds precommit metrics and reindex CLI command.

IMPROVEMENTS

  • Adds metrics that emit precommit data; precommit quorum delay from proposal, and precommit vote count and stake weight within timeout commit period. (#5251)
Commits

Updates github.com/cometbft/cometbft from 0.38.17 to 0.38.19

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.19

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

Full Changelog: cometbft/cometbft@v0.38.18...v0.38.19

v0.38.18

What's Changed

Full Changelog: cometbft/cometbft@v0.38.17...v0.38.18

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.19

October 14, 2025

This release fixes two security issues, including (ASA-2025-003). Users are encouraged to upgrade as soon as possible.

Additionally included is a bug fix to properly prune extended commits (with vote extensions).

BUG-FIXES

  • [consensus] Reject oversized proposals (#5324)
  • [store] Prune extended commits properly (5275)
  • [bits] Validate BitArray mismatched Bits and Elems length (ASA-2025-003)

v0.38.18

July 3, 2025

Adds precommit metrics and reindex CLI command.

IMPROVEMENTS

  • Adds metrics that emit precommit data; precommit quorum delay from proposal, and precommit vote count and stake weight within timeout commit period. (#5251)
Commits

Updates github.com/cometbft/cometbft from 0.38.17 to 0.38.19

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.19

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

Full Changelog: cometbft/cometbft@v0.38.18...v0.38.19

v0.38.18

What's Changed

Full Changelog: cometbft/cometbft@v0.38.17...v0.38.18

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.19

October 14, 2025

This release fixes two security issues, including (ASA-2025-003). Users are encouraged to upgrade as soon as possible.

Additionally included is a bug fix to properly prune extended commits (with vote extensions).

BUG-FIXES

  • [consensus] Reject oversized proposals (#5324)
  • [store] Prune extended commits properly (5275)
  • [bits] Validate BitArray mismatched Bits and Elems length (ASA-2025-003)

v0.38.18

July 3, 2025

Adds precommit metrics and reindex CLI command.

IMPROVEMENTS

  • Adds metrics that emit precommit data; precommit quorum delay from proposal, and precommit vote count and stake weight within timeout commit period. (#5251)
Commits

Updates github.com/cometbft/cometbft from 0.38.17 to 0.38.19

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.19

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

Full Changelog: cometbft/cometbft@v0.38.18...v0.38.19

v0.38.18

What's Changed

Full Changelog: cometbft/cometbft@v0.38.17...v0.38.18

Changelog

Sourced from github.com/cometbft/cometbft's changelog.

v0.38.19

October 14, 2025

This release fixes two security issues, including (ASA-2025-003). Users are encouraged to upgrade as soon as possible.

Additionally included is a bug fix to properly prune extended commits (with vote extensions).

BUG-FIXES

  • [consensus] Reject oversized proposals (#5324)
  • [store] Prune extended commits properly (5275)
  • [bits] Validate BitArray mismatched Bits and Elems length (ASA-2025-003)

v0.38.18

July 3, 2025

Adds precommit metrics and reindex CLI command.

IMPROVEMENTS

  • Adds metrics that emit precommit data; precommit quorum delay from proposal, and precommit vote count and stake weight within timeout commit period. (#5251)
Commits

Updates github.com/cometbft/cometbft from 0.38.17 to 0.38.19

Release notes

Sourced from github.com/cometbft/cometbft's releases.

v0.38.19

This is a security patch release to the CometBFT v0.38.x family that fixes GHSA-hrhf-2vcr-ghch

What's Changed

Full Changelog: cometbft/cometbft@v0.38.18...v0.38.19

v0.38.18

What's Changed

Bumps the go_modules group with 1 update in the / directory: [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft).
Bumps the go_modules group with 1 update in the /core/scripts directory: [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft).
Bumps the go_modules group with 1 update in the /deployment directory: [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft).
Bumps the go_modules group with 1 update in the /integration-tests directory: [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft).
Bumps the go_modules group with 1 update in the /integration-tests/load directory: [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft).
Bumps the go_modules group with 1 update in the /system-tests/lib directory: [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft).
Bumps the go_modules group with 1 update in the /system-tests/tests directory: [github.com/cometbft/cometbft](https://github.com/cometbft/cometbft).


Updates `github.com/cometbft/cometbft` from 0.38.17 to 0.38.19
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.17...v0.38.19)

Updates `github.com/cometbft/cometbft` from 0.38.17 to 0.38.19
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.17...v0.38.19)

Updates `github.com/cometbft/cometbft` from 0.38.17 to 0.38.19
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.17...v0.38.19)

Updates `github.com/cometbft/cometbft` from 0.38.17 to 0.38.19
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.17...v0.38.19)

Updates `github.com/cometbft/cometbft` from 0.38.17 to 0.38.19
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.17...v0.38.19)

Updates `github.com/cometbft/cometbft` from 0.38.17 to 0.38.19
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.17...v0.38.19)

Updates `github.com/cometbft/cometbft` from 0.38.17 to 0.38.19
- [Release notes](https://github.com/cometbft/cometbft/releases)
- [Changelog](https://github.com/cometbft/cometbft/blob/v0.38.19/CHANGELOG.md)
- [Commits](cometbft/cometbft@v0.38.17...v0.38.19)

---
updated-dependencies:
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.19
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.19
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.19
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.19
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.19
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.19
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/cometbft/cometbft
  dependency-version: 0.38.19
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 14, 2025
@github-actions
Copy link

This PR is stale because it has been open days with no activity.
Remove the stale label, comment, or update this PR to prevent this PR from being closed in days.

@github-actions github-actions bot added the Stale label Dec 14, 2025
@github-actions
Copy link

This PR has been automatically closed because it had been stale for > days.
If you wish to continue working on this PR, please reopen it to make any necessary changes.

@github-actions github-actions bot closed this Dec 22, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 22, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@github-actions github-actions bot deleted the dependabot/go_modules/go_modules-3a08f67f5b branch December 22, 2025 01:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code Stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants